# If using Apache, create .htaccess file
RewriteEngine On

# Redirect all requests to index.php
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?url=$1 [QSA,L]

# Protect sensitive files
<FilesMatch "^(config\.php|\.htaccess)$">
    Order Allow,Deny
    Deny from all
</FilesMatch>